added optional iptables configuration

also added AllowUsers config setting for sshd_config
added EC2 disclaimer for iptables